<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <title>我们</title>
</head>
<body>
<script>alert('XSS')</script>
<!--<script>alert('XSS')</script>-->
     {$data.text}



</body>
</html>